Classify the AI system, settle whether you are provider or deployer, and emit the obligations that follow — prohibitions first, then high-risk, then transparency
